THC Papers

The members of The Hacker's Choice have published
a lot of technical papers covering nearly the full pallette of
today's security. As a matter of fact some of the papers written
in the mid and late 90s might appear a little bit dusty, but we
believe you still may learn from them.

This paper focuses on new threats on one of the most popular
database platforms: Oracle. It demonstrates novel attacks
against the authentication scheme by exploiting a design flaw
in the implementation of key exchange, which enable
an attacker to crack sniffed passwords in a matter of seconds.